xCAT/confluent
2
0
Fork 0
mirror of https://github.com/xcat2/confluent.git synced 2026-09-11 20:16:27 +00:00
Code Issues Projects Releases Wiki Activity

Find ssh-keysign where SUSE 16 puts it

Browse Source 
The permissions.local rule named /usr/lib/ssh, so keysign kept mode 0755
and hostbased auth failed with 'could not open any host key'.
This commit is contained in:
Markus Hilger
2026-09-07 02:05:20 +02:00
parent 939a46d8d1
commit 9089d3700b
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
imgutil/imgutil
+6 -2
View File
@@ -692,13 +692,17 @@ class SuseHandler(OsHandler):
mkdirp(os.path.dirname(sshdwant))
if not os.path.lexists(sshdwant):
os.symlink('/usr/lib/systemd/system/sshd.service', sshdwant)
# 16 moved ssh-keysign to libexec
keysign = 'usr/libexec/ssh/ssh-keysign'
if not os.path.exists(os.path.join(self.targpath, keysign)):
keysign = 'usr/lib/ssh/ssh-keysign'
with open(os.path.join(self.targpath, 'etc/permissions.local'), 'a') as permout:
permout.write(
'/usr/lib/ssh/ssh-keysign root:ssh_keys 2711\n'
'/{0} root:ssh_keys 2711\n'
'/etc/ssh/ssh_host_dsa_key root:ssh_keys 640\n'
'/etc/ssh/ssh_host_ecdsa_key root:ssh_keys 640\n'
'/etc/ssh/ssh_host_ed25519_key root:ssh_keys 640\n'
'/etc/ssh/ssh_host_rsa_key root:ssh_keys 640\n'
'/etc/ssh/ssh_host_rsa_key root:ssh_keys 640\n'.format(keysign)
)
args.cmd = ['groupadd', 'ssh_keys']
run_constrainedx(fancy_chroot, (args,